Privacy Policy
Last updated: 8 October 2026
1. Who is responsible for data processing
OPERIX360 is the brand under which MALITA LASER, S.L. provides CRM, IP telephony and AI automation services. The controller of the personal data collected through this website is: Company name: MALITA LASER, S.L. NIF (tax ID): B01650035 Registered office: C/ Industria, 110, 08380 Malgrat de Mar (Barcelona), Spain Tax address and office: Pl. Urquinaona, 6, planta 14, puerta A1, 08010 Barcelona, Spain Email, including for data-protection requests: support@operix360.app Personal data is processed under Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and Law 34/2002 (LSSI-CE). No Data Protection Officer has been appointed, as the company's activity does not fall within Art. 37 GDPR or Art. 34 LOPDGDD.
2. What data we collect
Through website forms (contact form and cart): name, email, contact phone number, task description or selected services. When a form is submitted, the Cloudflare Turnstile anti-spam check processes your IP address and technical browser signals to tell a person from a bot. Through analytics, only after your consent via the cookie banner: anonymised visit data, namely browser type, time on page, referral source and truncated IP. Through the on-site AI chat: the content of your messages and the assistant's replies (see section 4).
3. Why we use your data and on what legal basis
• To respond to your enquiry, prepare a proposal and estimate, and conclude and perform a contract. Legal basis: pre-contractual steps at your request and performance of a contract (Art. 6(1)(b) GDPR). • Visit analytics to improve the site. Legal basis: your consent via the cookie banner (Art. 6(1)(a) GDPR), which you may withdraw at any time. • Protecting the site and forms against spam and abuse, and quality control of the AI assistant. Legal basis: our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR). • Keeping client records. Legal basis: compliance with Spanish commercial and tax obligations (Art. 6(1)(c) GDPR). We do not sell your data or share it with third parties other than the processors listed in section 5 and where required by law. We do not send marketing emails without your prior consent (Art. 21 LSSI-CE). We do not take decisions based solely on automated processing that produce legal effects for you.
4. AI chat on the site
The AI chat runs on Claude (Anthropic). By default we store only request metadata: hashed IP, language, number of turns in the session, reply length and processing time. Message content and assistant replies (up to 500 and up to 1500 characters respectively) may be logged for occasional assistant-quality checks, for no longer than 30 days. Do not include third-party personal data, card details or other confidential information in the chat. To have your chat history deleted, email support@operix360.app.
5. Data processors and transfers outside the EU
To run the site we use services that may receive your data as processors: • Anthropic (US): AI model for the chat. Transfer under the EU Standard Contractual Clauses included in Anthropic's DPA. • Vercel Inc. (US): site hosting and logs. Certified under the EU-US Data Privacy Framework. • Google LLC (US): Google Analytics 4, only after consent via the cookie banner. Certified under the EU-US Data Privacy Framework. • Cloudflare, Inc. (US): Turnstile anti-spam check on forms. Certified under the EU-US Data Privacy Framework. • Kommo (QSOFT LLC, US): the CRM that receives site enquiries: name, email, phone, message text and cart contents, plus the email and conversation transcript when a request is sent from the AI chat, and the sender's IP address. • Upstash, Inc. (US): anti-spam counters; only hashed IPs are stored, never the raw address. Transfers outside the European Economic Area rely on the EU-US Data Privacy Framework adequacy decision for certified companies, or on the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR). The list may change; the date of the latest version is shown at the top.
6. How long we keep data
Enquiry and client data: for the duration of the business relationship and afterwards for the applicable statutory and limitation periods; commercial and accounting records for clients are kept for 6 years (Art. 30 of the Spanish Commercial Code). Analytics: 14 months. AI chat logs: 30 days. You may request deletion at any time via support@operix360.app, unless the law requires us to keep the data.
7. Your rights
Under the GDPR and the LOPDGDD you have the right to access your data, rectify it, erase it, restrict its processing, object to processing, port it to another controller, and withdraw consent at any time. Send requests to support@operix360.app with the subject "Data protection"; we may ask for information to verify your identity. We respond within one month. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es) or with the supervisory authority of the EU country where you live or work.
8. Cookies
The site sets functional cookies to remember your language, cart state and your analytics-consent choice. Analytics cookies (Google Analytics, Vercel Analytics) are set only after explicit consent via the cookie banner. To withdraw consent, clear your browser cookies or email support@operix360.app.
9. Changes
We may update this policy. The date of the last update is shown at the top. Substantial changes will be announced on the website and, where we have your email, by email.